Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
File: KsPteUra-5HLgalp64qbKQX-4uw.mft (raw, json)
Hash identifier: iVXBIeQYBiYh6BIxdvZsDaxqI6/s+oDe9JPVSKlSSiI=
Subject key identifier: 80:39:41:1B:C3:69:7A:13:CA:75:A0:84:13:FA:2F:CB:B4:89:63:53
Authority key identifier: 2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
Certificate issuer: /CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Certificate serial: 0194BC04C6545CB55B407523EAA1CC8AAAC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:16 +0000
Manifest this update: Fri 31 Jan 2025 11:00:16 +0000
Manifest next update: Sat 01 Feb 2025 11:00:16 +0000
Files and hashes: 1: KsPteUra-5HLgalp64qbKQX-4uw.crl (hash: qqYyMr1xI7qQ0V+SxUspkFA+8jJ33gdU80XUB79jZek=)
2: PKyx0DcFoAagRLDeVRH7IggDBvs.roa (hash: pNDjxNhK4qz1Wc21dlphpRgyPK79NSu66uAh/Cd4/LQ=)
3: zxynKoaXLk9CSCbEuR1SMnhOszM.roa (hash: 0C0maO3P6rLabRCNi4Fq6yr5sjK9+mFynQgMmbGpRUM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c6:54:5c:b5:5b:40:75:23:ea:a1:cc:8a:aa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Validity
Not Before: Jan 31 11:00:16 2025 GMT
Not After : Feb 1 11:00:16 2025 GMT
Subject: CN=8039411bc3697a13ca75a08413fa2fcbb4896353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2e:d7:e6:15:af:87:58:b1:03:1b:ad:34:48:
80:0c:76:d2:b2:a2:b6:11:20:f8:ee:a0:47:44:66:
81:83:f3:55:be:3d:7b:d8:66:61:40:96:54:a5:fa:
ff:ff:7d:f6:4d:97:cc:ef:fb:7c:b5:27:73:e9:54:
e0:cd:54:d5:2d:c1:f0:d5:3c:a4:09:e5:e1:80:34:
b4:2a:b7:5e:00:0d:23:16:4e:b4:78:f9:5c:ec:dd:
8c:fb:69:3d:5c:52:08:32:b0:b6:35:d3:b5:28:36:
96:b2:aa:a3:56:28:db:0b:fc:05:47:8d:df:ef:bd:
1b:0e:81:b7:9b:9f:1c:c9:1a:77:e2:10:3a:3c:21:
db:bc:8b:07:8d:af:73:18:32:84:79:c9:31:e6:53:
20:35:64:8b:36:f8:0f:4c:20:88:9a:42:ea:bf:75:
ff:9d:cb:b2:64:e8:e5:e4:a3:3d:f8:cd:2d:60:30:
07:be:ba:00:90:15:d4:f5:53:15:6b:d9:42:2a:bd:
f0:5f:f3:1c:0e:13:77:82:06:9b:5d:10:5e:fc:a9:
f4:b8:b3:ce:16:77:c2:b2:5d:1f:af:10:23:cf:74:
f8:88:92:17:96:ec:80:ef:39:eb:76:20:e9:dd:c5:
ac:f6:9c:20:85:af:33:ef:09:7f:17:39:af:64:47:
fb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:39:41:1B:C3:69:7A:13:CA:75:A0:84:13:FA:2F:CB:B4:89:63:53
X509v3 Authority Key Identifier:
keyid:2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c0:3b:73:59:4b:87:0b:3d:4c:d9:a1:93:cc:0e:a2:81:8f:
41:41:82:31:36:f7:60:c6:99:48:b0:5b:b8:a3:c0:ef:d1:14:
c2:cc:ef:31:89:9d:a6:82:9d:34:bc:65:96:52:5e:bb:7b:e3:
35:c0:0e:cc:b2:ff:59:0b:2c:a8:b5:93:04:88:ae:b9:f6:1d:
4f:08:42:9b:4f:42:8d:1d:b3:d2:62:c8:99:24:ac:fe:d1:88:
3b:e9:a6:a8:09:88:a4:7c:c9:f6:e9:0f:b4:5d:12:0c:0b:c8:
79:e2:46:1d:6c:b6:b2:1d:03:83:28:8e:de:f5:d8:43:22:89:
1c:53:dc:5e:a5:8e:bc:1a:9b:c6:fc:86:58:70:5c:96:22:4c:
a1:a7:22:1c:09:e2:58:18:1a:19:c6:28:56:3f:e8:19:b1:69:
c5:7b:ec:94:77:a6:11:ee:d0:e0:d2:12:53:82:ef:0a:02:94:
86:ad:c6:f1:23:7c:46:7d:96:a3:f4:21:8d:62:5c:75:b6:5b:
c6:9d:e5:61:83:7f:30:53:37:fc:b0:28:f7:d5:9f:6d:86:b9:
3b:c5:52:04:07:9a:28:51:0d:6c:6a:08:81:cd:40:c4:49:7f:
4d:78:ff:c7:09:cf:c9:25:13:ae:91:ac:a9:82:c3:9a:85:b7:
22:29:9c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:18:35 2025 by rpki-client